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the present application. 
10 Background of the Invention 

This invention relates to user- interactive network 
sales systems for implementing an open marketplace for goods 
or services over computer networks such as the Internet. 

U.S. Patent Application Serial No. 08/168,519, filed 
15 December 16, 1993 by David K. Gifford and entitled "Digital 
Active Advertising, " the entire disclosure of which is 
hereby incorporated herein in its entirety by reference, 
describes a network sales system that includes a plurality 
of buyer computers, a plurality of merchant computers, and a 

2 0 payment computer. A user at a buyer computer asks to have 

advertisements displayed, and the buyer computer requests 
advertisements from a merchant computer, which sends the 
advertisements to the buyer computer. The user then 
requests purchase of an advertised product, and the buyer 
25 computer sends a purchase message to the merchant computer. 
The merchant computer constructs a payment order that it 
sends to the payment computer, which authorizes the purchase 
and sends an authorization message to the merchant computer. 
When the merchant computer receives the authorization 

3 0 message it sends the product to the buyer computer. 

The above-mentioned patent application also 
describes an alternative implementation of the network sales 
system in which, when the user requests purchase of an 
advertised product, the buyer computer sends a payment order 
35 directly to the payment computer, which sends an 



directly to the payment computer, which sends an 
authorization message back to the buyer computer that 
includes an unforgeable certificate that the payment order 
is valid. The buyer computer then constructs a purchase 
message that includes the unforgeable certificate and sends 
it to the merchant computer. When the merchant computer 
receives the purchase request it sends the product to the 
buyer computer, based upon the pre-authorized payment order. 

Summary of the Invention 

In one aspect, the invention provides a network- 
based sales system that includes at least one buyer computer 
for operation by a user desiring to buy a product, at least 
one merchant computer, and at least one payment computer . 
The buyer computer, the merchant computer, and the payment 
computer are interconnected by a computer network. The 
buyer computer is programmed to receive a user request for 
purchasing a product, and to cause a payment message to be 
sent to the payment computer that comprises a product 
identifier identifying the product. The payment computer is 
programmed to receive the payment message, to rause an 
access message to be created that comprises the product 
identifier and an access message authenticator based on a 
cryptographic key, and to cause the access message to be 
sent to the merchant computer. The merchant computer is 
programmed to receive the access message, to verify the 
access message authenticator to ensure that the access 
message authenticator was created using the cryptographic 
key, and to cause the product to be sent to the user 
desiring to buy the product. 

The invention provides a simple design architecture 
for the network sales system that allows the merchant 
computer to respond to payment orders from the buyer 
computer without the merchant computer having to communicate 



directly with the payment computer to ensure that the user 
is authorized to purchase the product and without the 
merchant computer having to store information in a database 
regarding which buyers are authorized to purchase which 
products. Rather, when the merchant computer receives an 
access message from the buyer computer identifying a product 
to be purchased, the merchant computer need only check the 
access message to ensure that it was created by the payment 
computer (thereby establishing for the merchant computer 
that the buyer is authorized to purchase the product) , and 
then the merchant computer can cause the product to be sent 
to the buyer computer who has been authorized to purchase 
the product . 

In another aspect, the invention features a network- 
based sales system that includes at least one buyer computer 
for operation by a user desiring to buy products, at least 
one shopping cart computer, and a shopping cart database 
connected to the shopping cart computer. The buyer computer 
and the shopping cart computer are interconnected by a 
computer network. The buyer computer is programmed to 
receive a plurality of requests from a user to add a 
plurality of respective products to a shopping cart in the 
shopping cart database, and, in response to the requests to 
add the products, to send a plurality of respective shopping 
cart messages to the shopping cart computer each of which 
includes a product identifier identifying one of the 
plurality of products. The shopping cart computer is 
programmed to receive the plurality of shopping cart 
messages, to modify the shopping cart in the shopping cart 
database to reflect the plurality of requests to add the 
plurality of products to the shopping cart, and to cause a 
payment message associated with the shopping cart to be 
created. The buyer computer is programmed to receive a 



request from the user to purchase the plurality of products 
added to the shopping cart and to cause the payment message 
to be activated to initiate a payment transaction for the 
plurality of products added to the shopping cart. 

In another aspect, the invention features a network- 
based link message system that includes at least one client 
computer for operation by a client user and at least one 
server computer for operation by a server user. The client 
computer and the server computer are interconnected by a 
computer network. The client computer is programmed to send 
an initial link message to the server computer. The server 
computer is programmed to receive the initial link message 
from the client computer and to create, based on information 
contained in the initial link message, a session link 
message that encodes a state of interaction between the 
client computer and the server computer. The session link 
message includes a session link authenticator , computed by a 
cryptographic function of the session link contents, for 
authenticating the session link message. The server 
computer is programmed to cause the session link message to 
be sent to the client computer. The client computer is 
programmed to cause the session link message to be sent to a 
computer in the network that is programmed to authenticate 
the session link message by examining the session link 
authenticator and that is programmed to respond to the 
session link message based on the state of the interaction 
between the client computer and the server computer. 

In another aspect, the invention features a network- 
based sales system that includes a merchant database having 
a plurality of digital advertisements and a plurality of 
respective product fulfillment items, at least one creation 
computer for creating the merchant database, and at least 
one merchant computer for causing the digital advertisements 



to be transmitted to a user and for causing advertised 
products to be transmitted to the user. The creation 
computer and the merchant computer are interconnected by a 
computer network. The creation computer is programmed to 
5 create the merchant database, and to transmit the digital 
advertisements and the product fulfillment items to the 
merchant computer. The merchant computer is programmed to 
receive the digital advertisements and product fulfillment 
items, to receive a request for a digital advertisement from 

10 a user, to cause the digital advertisement to be sent to the 
user, to receive from the user an access message identifying 
an advertised product, and to cause the product to be sent 
to the user in accordance with a product fulfillment item 
corresponding to the product . 

15 In another aspect, the invention features a 

hypertext statement system that includes a client computer 
for operation by a client user and one or more server 
computers for operation by a server user. The client 
computer and the server computers are interconnected by a 

20 computer network. At least one of the server computers is 
programmed to record purchase transaction records in a 
database. Each of the purchase transaction records includes 
a product description. The server computer is programmed to 
transmit a statement document that includes the purchase 

25 transaction records to the client computer* The client 

computer is programmed to display the product descriptions, 
to receive a request from the client user to display a 
product corresponding to a product description displayed by 
the client computer, and to cause a product hypertext link 

3 0 derived from a purchase transaction record to be activated. 
At least one of the server computers is programmed to 
respond to activation of the product hypertext link by 
causing the product to be sent to the client computer. 
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In another aspect, the invention features a network 
payment system that includes at least one buyer computer for 
operation by a user desiring to buy a product and at least 
one payment computer for processing payment messages from 
5 the buyer computer. The buyer computer and the payment 
computer are interconnected by a computer network. The 
buyer computer is programmed to cause a payment message to 
be sent to the payment computer. The payment message 
includes a product identifier identifying the product that 

10 the user desires to buy. The payment computer is programmed 
to receive the payment message, to cause an access message 
to be created to enable the user to access the product, and 
to record a purchase transaction record in the settlement 
database. The buyer computer is programmed to cause a 

15 request for purchase transaction records to be sent to the 
payment computer. The payment computer is programmed to 
receive the request for purchase transaction records and to 
cause a document derived from the purchase transaction 
records to be sent to the buyer computer . 

2 0 Brief Description of the Drawings 

Fig. 1 is a block diagram of a network sales system 
in accordance with the present invention. 

Fig. 2 (2 -A through 2-1) is a flowchart diagram 
illustrating the operation of a purchase transaction in the 

25 network sales system of Fig. 1. 

Fig. 3 (3 -A through 3-B) is a flowchart diagram 
illustrating the use of a shopping cart for the purchase of 
products in connection with the network sales system of Fig. 
1. 

30 Fig. 4 (4-A through 4-C) is a flowchart diagram 

illustrating the operation of a smart statement in the 
network sales system of Fig. 1. 
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Fig. 5 is a screen snapshot of an advertising 
document that the merchant computer sends to the buyer 
computer in Fig. 2. 

Fig . 6 is a screen snapshot of a confirmation 
document that the payment computer sends to the buyer 
computer in Fig. 2. 

Fig. 7 is a screen snapshot of a new account 
document that the payment computer sends to the buyer 
computer in Fig . 2 . 

Fig. 8 is a screen snapshot of an account name 
prompt that the buyer computer creates in Fig. 2. 

Fig. 9 is a screen snapshot of a document that the 
payment computer sends to the buyer computer in Fig. 2 and 
that provides an option either to repurchase or to use a 
previously purchased access. 

Fig. 10 is a screen snapshot of a fulfillment 
document that the merchant computer sends to the buyer 
computer in Fig. 2. 

Fig. 11 is a screen snapshot of a smart statement 
document that the payment computer sends to the buyer 
computer in Fig. 4. 

Figs. 12 and 13 are screen snapshots of a 
transaction detail document that the payment computer sends 
to the buyer computer in Fig. 4. 

Fig. 14 is a screen snapshot of a customer service 
form that the payment computer sends to the buyer computer 
in Fig . 4 . 

Detailed Description 
With reference to Fig. 1, a network sales system in 
accordance with the present invention includes a buyer 
computer 12 operated by a user desiring to buy a product, a 
merchant computer 14, which may be operated by a merchant 
willing to sell products to the buyer or by a manager of the 



network sales system, a payment computer 16 typically 
operated by a manager of the network sales system, and a 
creation computer 20 typically operated by the merchant. 
The buyer, merchant, payment, and creation computers are all 
inter-connected by a computer network 10 such as the 
Internet . 

Creation computer 20 is programmed to build a 
"store" of products for the merchant. A printout of a 
computer program for use in creating such a "store" in 
accordance with the present invention is provided as 
Appendix F . 

The products advertised by merchant computer 14 may 
be, for example, newspaper or newsletter articles available 
for purchase by buyers. Creation computer 20 creates a 
digital advertisement database 18 that stores advertising 
documents (which may for example be in the form of summaries 
of newspaper or newsletter articles, accompanied by prices) 
and product fulfillment items (which may be the products 
themselves if the products can be transmitted over the 
network, or which may be hard goods identifiers if the 
products are hard goods, i.e., durable products as opposed 
to information products) . Creation computer 2 0 transmits 
contents of the advertising document database 18 to merchant 
computer 14 to enable the merchant computer to cause 
advertisements and products to be sent to buyers. Merchant 
computer 14 maintains advertising documents locally in 
advertising document database 15. In an alternative 
embodiment, the creation computer does not have a local 
digital advertisement database, but instead updates a remote 
advertising document database on a merchant computer. These 
updates can be accomplished using HTML forms or other remote 
database technologies as is understood by practitioners of 
the art . 



Payment computer 16 has access to a settlement 
database 22 in which payment computer 16 can record details 
of purchase transactions. The products may be organized 
into various "domains" of products , and payment computer 16 
can access settlement database 22 to record and retrieve 
records of purchases of products falling within the various 
domains. Payment computer 16 also has access to a shopping 
cart database 21 in which a "shopping cart" of products that 
a user wishes to purchase can be maintained as the user 
shops prior to actual purchase of the contents of the 
shopping cart . 

With reference to Fig, 2, a purchase transaction 
begins when a user at buyer computer 12 requests 
advertisements {step 24) and buyer computer 12 accordingly 
sends an advertising document URL (universal resource 
locator) to merchant computer 14 {step 26) * The merchant 
computer fetches an advertising document from the 
advertising document database (step 28) and sends it to the 
buyer computer (step 30) . An example of an advertising 
document is shown in Fig. 5. Details of URLs and how they 
are used are found in Appendix G. 

The user browses through the advertising document 
and eventually requests a product (step 32) . This results 
in the buyer computer sending payment URL A to the payment 
computer (step 34) . Payment URL A includes a product 
identifier that represents the product the user wishes to 
buy, a domain identifier that represents a domain of 
products to which the desired product belongs, a payment 
amount that represents the price of the product, a merchant 
computer identifier that represents merchant computer 14, a 
merchant account identifier that represents the particular 
merchant account to be credited with the payment amount, a 
duration time that represents the length of tinie for which 



access to the product is to be granted to the user after 
completion of the purchase transaction, an expiration time 
that represents a deadline beyond which this particular 
payment URL cannot be used, a buyer network address, and a 
payment URL authenticator that is a digital signature based 
on a cryptographic key. The payment URL authenticator is a 
hash of other information in the payment URL, the hash being 
defined by a key shared by the merchant and the operator of 
the payment computer. 

In an alternative embodiment, step 34 consists of 
the buyer computer sending a purchase product message to the 
merchant computer, and the merchant computer provides 
payment URL A to the buyer computer in response to the 
purchase product message. In this alternative embodiment, 
payment URL A contains the same contents as above. The 
buyer computer then sends the payment URL A it has received 
from the merchant computer to the payment computer. 

When the payment computer receives the payment URL 
it verifies whether the payment URL authenticator was 
created from the contents of the payment URL using the 
cryptographic key (step 36) . If not, the payment computer 
sends a document to the buyer computer indicating that 
access to the network sales system is denied (step 38) . 
Otherwise, the payment computer determines whether the 
expiration time has past (step 40) . If it has, the payment 
computer sends a document to the buyer computer indicating 
that the time has expired {step 41) . Otherwise, the payment 
computer checks the buyer computer network address to see if 
it matches the one specified in the payment URL (step 42) . 
If it does not match, the payment computer sends a document 
to the buyer computer indicating that access to the network 
payment system is denied (step 43). Otherwise, the payment 
computer sends a payment confirmation document to the buyer 
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computer, the payment confirmation document including an 
"open" link and a "continue" link (step 44) . 

An example of a confirmation document is shown in 
Fig. 6. The confirmation document asks the user to click on 
a "continue" button if the user already has an account with 
the payment computer, or to click on an "open" button if the 
user does not already have an account and wishes to open 
one . 

If the user clicks on the "open" button (step 46) , 
the buyer computer sends payment URL C to the payment 
computer (step 48) , payment URL C being similar to payment 
URL A but also indicating that the user does not yet have an 
account . The payment computer creates a new account 
document (step 50) and sends it to the buyer computer (step 
52). An example of a new account document is shown in Fig. 
7. When the user receives the new account document he 
enters the new account name, an account password, a credit 
card number, the credit card expiration date, and security 
information such as the maiden name of the user's mother 
(step 54) , and presses a "submit" button (not shown in Fig. 
7) . The buyer computer sends the new account information to 
the payment computer (step 56) , which enters the new account 
in the settlement database (step 58) . 

If the user clicks on the "continue" button (step 
60) , the buyer computer sends payment URL B to the payment 
computer (step 62) , payment URL B being similar to payment 
URL A but also indicating that the user already has an 
account. The payment computer then instructs the buyer 
computer to provide the account name and password (steps 64 
and 66) , and the buyer computer prompts the user for this 
information by creating an account name prompt (example 
shown in Fig. 8) and a similar password prompt. The user 
enters the information (step 68) and the buyer computer 
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sends the account name and password to the payment computer 
(step 70) . 

The payment computer verifies whether the user name 
and password are correct (step 72) . If they are not 
correct, the payment computer sends a document to the buyer 
computer indicating that access to the network sales system 
is denied (step 74) . Otherwise, the payment computer 
determines whether additional security is warranted, based 
on, e.g., whether the payment amount exceeds a threshold 
(step 73) . If additional security is warranted, the payment 
computer creates a challenge form document and sends it to 
the buyer computer (step 75) . The user enters the security 
information (step 77) , the buyer computer sends the security 
information to the payment computer (step 79) , and the 
payment computer determines whether the security information 
is correct (step 81). If it is not correct, the payment 
computer sends a document to the buyer computer indicating 
that access to the network sales system is denied (step 83). 

If the security information is correct, or if 
additional security was not warranted, the payment computer 
checks the settlement database to determine whether the user 
has unexpired access to the domain identifier contained in 
the payment URL (step 82) . If so, the payment computer 
sends to the buyer computer a document providing an option 
either to repurchase or to use the previously purchased 
access (step 84) . An example of such a document is shown in 
Fig. 9. The user can respond to the recent purchase query 
document by choosing to access the previously purchased 
document (step 85) or to go ahead and buy the currently 
selected product (step 86) . 

If the user chooses to access the previously 
purchased document, the buyer computer skips to step 92 (see 
below) . If the user chooses to buy the currently selected 
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product, the payment computer calculates an actual payment 
amount that may differ from the payment amount contained in 
the payment URL (step 87) . For example, the purchase of a 
product in a certain domain may entitle the user to access 
other products in the domain for free or for a reduced price 
for a given period of time. 

The payment computer then verifies whecher the user 
account has sufficient funds or credit (step 76) . If not, 
the payment computer sends a document to the buyer computer 
indicating that the user account has insufficient funds 
(step 78) . Otherwise, the payment computer creates an 
access URL (step 80) that includes a merchant computer 
identifier, a domain identifier, a product identifier, an 
indication of the end of the duration time for which access 
to the product is to be granted, the buyer network address, 
and an access URL authenticator that is a digital signature 
based on a cryptographic key. The access URL authenticator 
is a hash of other information in the access URL, the hash 
being defined by a key shared by the merchant and the 
operator of the payment computer. The payment computer then 
records the product identifier, the domain, the user 
account, the merchant account, the end of duration time, and 
the actual payment amount in the settlement database {step 
88) . 

The payment computer then sends a redirect to access 
URL to the buyer computer (step 90) , which sends the access 
URL to the merchant computer (step 92) . The merchant 
computer verifies whether the access URL authenticator was 
created from the contents of the access URL using the 
cryptographic key (step 94} . If not, the merchant computer 
sends a document to the buyer computer indicating that 
access to the product is denied (step 96) . 
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Otherwise, the merchant computer verifies whether 
the duration time for access to the product has expired 
(step 98) . This is done because the buyer computer can 
request access to a purchased product repeatedly. If the 
duration time has expired, the merchant computer sends a 
document to the buyer computer indicating that the time has 
expired (step 100) . Otherwise the merchant computer 
verifies that the buyer computer network address is the same 
as the buyer network address in the access URL (step 101) , 
and if so, sends a fulfillment document to the buyer 
computer (step 102) , which is displayed by the buyer 
computer (step 104) . An example of a fulfillment document 
is shown in Fig. 10. Otherwise, the merchant computer sends 
a document to the buyer computer indicating that access is 
not allowed (step 103) . 

With reference now to Fig. 3, when the merchant 
computer sends the advertising document to the buyer 
computer, the user may request that a product be added to a 
shopping cart in the shopping cart database rather than 
request that the product be purchased immediately. The 
buyer computer sends a shopping cart URL to the payment 
computer (step 108) , the shopping cart URL including a 
product identifier, a domain identifier, a payment amount, a 
merchant computer identifier, a merchant account identifier, 
a duration time, an expiration time, and a shopping cart URL 
authenticator that is a digital signature based on a 
cryptographic key. The shopping cart URL authenticator is a 
hash of other information in the shopping cart URL, the hash 
being defined by a key shared by the merchant and the 
operator of the payment computer. 

The payment computer verifies whether the shopping 
cart URL authenticator was created from the contents of the 
shopping cart URL using a cryptographic key (step 110) . If 

- 14 - 



not , the payment computer sends a document to the buyer 
computer indicating that access to the network sales system 
is denied (step 112) . Otherwise, before any modification to 
a user's shopping cart is allowed, user authentication is 
performed (step 113) in a manner analogous to steps 40-81. 
Once the user is authenticated, the payment computer creates 
or updates a payment URL for the shopping cart (step 114) . 

The user then either requests more advertisements 
(step 24 in Fig. 2) and possibly adds another product to the 
shopping cart, requests display of the shopping cart (step 
116) , or requests purchase of the entire contents of the 
shopping cart (step 124) . If the user requests display of 
the shopping cart (step 116) , the buyer computer sends a 
fetch shopping cart request to the payment computer (step 
118) , and the payment computer and buyer computer (step 119) 
perform steps analogous to steps 64-81. The payment 
computer returns the contents of the shopping cart to the 
buyer computer (step 120) , which displays the contents of 
the shopping cart (step 122) . If the user requests that the 
entire contents of the shopping cart be purchased (step 124) 
the buyer computer causes the payment URL for the shopping 
cart to be activated (step 126) and the payment URL is 
processed in a manner- analogous to the processing of payment 
URLs for individual products (beginning with step 3 6 in Fig. 
2) . 

With reference now to Fig. 4, a user can request 
display of a "smart statement" that lists purchase 
transactions for a given month (step 128) . When the buyer 
computer receives such a request, it sends a smart statement 
URL to the payment computer (step 130) . 

When the payment computer receives the smart 
statement URL, it verifies whether the smart statement URL 
authenticator was created from the contents of the smart 
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statement URL using a cryptographic key (step 132) . If not, 
the payment computer sends a document to the buyer computer 
indicating that access is denied (step 134) . Otherwise, the 
payment computer checks to determine whether the buyer 
network address in the smart statement URL matches the buyer 
computer's actual network address (step 136). If not, the 
payment computer sends a document to the buyer computer 
indicating that access is denied (step 138) . Otherwise 
(step 140) , the payment computer and buyer computer perform 
a set of steps analogous to steps 64 - 81 in Fig . 2 (payment 
computer requests account name and password, user provides 
the requested information, and payment computer verifies the 
information) . 

In an alternative embodiment steps 132-13 8 are 

omitted . 

After verification of account information is 
complete, the payment computer retrieves the requested 
settlement data from the settlement database, creates a 
smart statement document for the buyer, and sends the smart 
statement document to the buyer computer (step 142) . An 
example of a smart statement document is shown in Fig . 11 . 
Each purchase transaction record in the smart statement 
document includes the data of the transaction, the name of 
the merchant, an identification of the product, and the 
payment amount for the product . The smart statement 
document also includes a transaction detail URL for each 
purchase transaction (these URLs, or hypertext links, are 
discussed below and are not shown in Fig. 11) . The smart 
statement document also identifies previous statements that 
the user may wish to have displayed. 

The buyer computer displays the retrieved document 
(step 144) , and the user may request transaction details for 
a particular transaction listed on the smart statement (step 
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146) . If so, the buyer computer sends a transaction detail 
URL (or "payment detail URL 11 ) to the payment computer (step 
148). The transaction detail URL includes a transaction 
identifier, a buyer network address, and a transaction 
detail URL authenticator . When the payment computer 
receives the transaction detail URL, it performs (step 150) 
a set of steps analogous to steps 132-140 (verification of 
URL authenticator , buyer network address, and account 
information) . The payment computer then retrieves from the 
settlement database data corresponding to the payment 
transaction specified in the transaction detail URL, creates 
a transaction detail document, and sends it to the buyer 
computer (step 152) . 

An example of a transaction detail document is shown 
in Figs. 12 and 13. The document displays a number of items 
of information about the transaction, including the 
transaction date, end of the duration time ("expiration"), a 
description of the product , the payment amount , the domain 
corresponding to the product, an identification of the 
merchant, and the merchant's address. 

The smart statement document and the transaction 
detail document both include customer service URLs 
(hypertext links) that allow the user to request customer 
service (i.e., to send comments and suggestions to the 
payment computer) . When the user requests customer service 
(step 154), the buyer computer sends the customer service 
URL to the payment computer (step 156) , which creates a 
customer service form and sends it to the buyer computer 
(step 158) . An example of a customer service form is shown 
in Fig. 14. The user types comments into the customer 
service form (step 16 0 ) , and the buyer computer sends the 
user's comments to the payment computer (step 162). The 
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payment computer then posts the user comments and sends a 
thank you document to the buyer computer (step 164) . 

A user may request display of a produce included in 
the smart statement . When the user requests that the 
product be displayed (step 166) , the buyer computer sends 
the access URL contained in the smart statement document to 
the merchant computer (step 16 8) , and the buyer computer and 
merchant computer perform a set of steps analogous to steps 
94-104 in Fig. 2 (authentication of access URL, verification 
whether duration time has expired, verification of buyer 
network address, and transmission of fulfillment document to 
buyer computer) . 

Whenever the present application states that one 
computer sends a URL to another computer, it should be 
understood that in preferred embodiments the URL is sent in 
a standard HTTP request message, unless a URL message is 
specified as a redirection in the present application. The 
request message includes components of the URI as described 
by the standard HTTP protocol definition. These URL 
components in the request message allow the server to 
provide a response appropriate to the URL. The term "URL" 
as used the present application is an example of a "link," 
which is a pointer to another document or form (including 
multimedia documents, hypertext documents including other 
links, or audio/video documents) . 

When the present application states that one 
computer sends a document to another computer, it should be 
understood that in preferred embodiments the document is a 
success HTTP response message with the document in the body 
of the message. When the present application states that a 
server sends an account name and password request message to 
the client, it should be understood that in preferred 
embodiments the account name and password request message is 
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an unauthorized HTTP response. A client computer sends 
account name and password information to a server as part of 
a request message with an authorization field. 

The software architecture underlying the particular 
5 preferred embodiment is based upon the hypertext conventions 
of the World Wide Web. Appendix A describes the Hypertext 
Markup Language (HTML) document format used to represent 
digital advertisements , Appendix B describes the HTML forms 
fill out support in Mosaic 2.0, Appendix C is a description 

10 of the Hypertext Transfer Protocol (HTTP) between buyer and 
merchant computers, Appendix D describes how documents are 
named with Uniform Resource Locators (URLs) in the network 
of computers, and Appendix E describes the authentication of 
URLs using digital signatures. 

15 A printout of a computer program for use in creating 

and operating such a "store" in accordance with the present 
invention is provided as Appendix F. A printout of a 
computer program for use in operating other aspects of the 
network sales system in accordance with the present 

2 0 invention is provided in Appendix G. 

There has been described a new and useful network - 
based sales system. It is apparent that those skilled in 
the art may make numerous modifications and departures from 
the specific embodiments described herein without departing 

2 5 from the spirit and scope of the claimed invention. 

What is claimed is: 
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1 1 . A network-based sales system, comprising : 

2 a merchant database comprising a plurality of 

3 digital advertisements and a plurality of respective product 

4 fulfillment items ; 

5 at least one creation computer for creating said 

6 merchant database ; and 

7 at least one merchant computer for causing said 

8 digital advertisements to be transmitted to a user and for 

9 causing advertised products to be transmitted to said user; 

10 said creation computer and said merchant computer 

11 being interconnected by a computer network ; 

12 said creation computer being programmed to create 

13 said merchant database, and to transmit said digital 

14 advertisements and said product fulfillment items to said 

15 merchant computer; 

16 said merchant computer being programmed to receive 

17 said digital advertisements and product fulfillment items, 

18 to receive a request for a digital advertisement from a 

19 user, to cause said digital advertisement to be sent to said 
2 0 user, to receive from said user an access mes^^qe 

21 identifying an advertised product, and to cause said product 

22 to be sent to said user in accordance with a product 

23 fulfillment item corresponding to said product. 

1 2 . A network-based sales system in accordance with 

2 claim 1, wherein each of said digital advertisements 

3 comprises an abstract of a product and a price. 

1 3 . A network-based sales system in accordance with 

2 claim 2, wherein: 

3 at least one of said product fulfillment items 

4 comprises a product itself; and 
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5 said creation computer is programmed to transmit 

6 said product to said merchant computer with said digital 

7 advertisements. 

1 4 . A network-based sales system in accordance with 

2 claim 2, wherein: 

3 at least one of said product fulfillment items 

4 comprises a hard good identifier; and 

5 said creation computer is programmed to transmit 

6 said hard good identifier to said merchant computer with 

7 said digital advertisements. 

1 5. A method of operating a merchant computer in a 

2 network-based sales system comprising a merchant database 

3 that comprises a plurality of digital advertisements and a 

4 plurality of respective product fulfillment items, at least 

5 one creation computer for creating said merchant database, 

6 and at least one merchant computer for causing said digital 

7 advertisements to be transmitted to a user and for causing 

8 advertised products to be transmitted to said user, said 

9 creation computer and said merchant computer being 

10 interconnected by a computer network, said method comprising 

11 the steps of: 

12 receiving, at said merchant computer, said digital 

13 advertisements and said product fulfillment items, said 

14 digital advertisements and said product fulfillment items 

15 having been transmitted to said merchant computer by said 

16 creation computer, said merchant database comprising said 

17 digital advertisements and said product fulfillment items 

18 having been created by said creation computer; 

19 receiving a request for a digital advertisement from 
2 0 a user; 
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21 causing said digital advertisement to be sent to 

22 said user; 

23 receiving from said user an access message 

24 identifying an advertised product; and 

25 causing said product to be sent to said user in 

2 6 accordance with a product fulfillment item corresponding to 

27 said product. 

1 6 . A hypertext statement system, comprising: 

2 a client computer for operation by a client user; 

3 and 

4 one or more server computers for operation by a 

5 server user; 

6 said client computer and said server computers being 

7 interconnected by a computer network; 

8 at least one of said server computers being 

9 programmed to record purchase transaction records in a 

10 database, each of said purchase transaction records 

11 comprising a product description, and to transmit a 

12 statement document comprising said purchase transaction 

13 records to said client computer; 

14 said client computer being programmed to display 

15 said product descriptions, to receive a request from said 

16 client user to display a product corresponding to a product 

17 description displayed by said client computer, and to cause 

18 a product hypertext link derived from a purchase transaction 

19 record to be activated; 

2 0 at least one of said server computers being 

21 programmed to respond to activation of said product 

22 hypertext link by causing said product to be sent to said 

23 client computer. 
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1 7 . A hypertext statement system in accordance with 

2 claim 6, wherein: 

3 said client computer is programmed to receive a 

4 request from said client user to display transaction details 

5 corresponding to a product description displayed by said 

6 client computer and to cause a transaction detail hypertext 

7 link corresponding to said product description to be 

8 activated; and 

9 said server computer is programmed to respond to 

10 activation of said transaction detail hypertext link by 

11 transmitting said transaction details to said client 

12 computer as a transaction detail document. 

1 8 . A hypertext statement system in accordance with 

2 claim 7, wherein: 

3 said transaction detail document further comprises a 

4 customer service form hypertext link; 

5 said client computer is programmed to receive a 

6 request from said client user to display a customer service 

7 form and to cause said customer service form hypertext link 

8 to be activated; and 

9 said server computer is programmed to respond to 

10 activation of said customer service form hypertext link by 

11 transmitting said customer service form to said client 

12 computer . 

1 9 . A hypertext statement system in accordance with 

2 claim 6, wherein: 

3 said statement document further comprises a customer 

4 service form hypertext link; 

5 said client computer is programmed to receive a 

6 request from said client user to display a customer service 
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7 form and to cause said customer service form hypertext link 

8 to be activated; and 

9 said server computer is programmed to respond to 

10 activation of said customer service form hypertext link by 

11 transmitting said customer service form to said client 

12 computer . 

1 10. A method of operating a server computer in a 

2 hypertext statement system comprising a client computer for 

3 operation by a client user, and one or more server computers 

4 for operation by a server user, said client computer and 

5 said server computers being interconnected by a computer 

6 network, said method comprising the steps of: 

7 recording, at one of said server computers, purchase 

8 transaction records in a database, each of said purchase 

9 transaction records comprising a product description; and 

10 transmitting a statement document comprising said 

11 purchase transaction records to said client computer; 

12 said client computer being programmed to display 

13 said product descriptions, to receive a request from said 

14 client user to display a product corresponding to a product 

15 description displayed by said client computer, and to cause 

16 a product hypertext link derived from a purchase transaction 

17 record to be activated; 

18 at least one of said server computers being 

19 programmed to respond to activation of said product 

20 hypertext link by causing said product to be sent to said 

21 client computer. 

1 11. A network payment system, comprising: 

2 at least one buyer computer for operation by a user 

3 desiring to buy a product; and 
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4 at least one payment computer for processing payment 

5 messages from said buyer computer; 

6 said buyer computer and said payment computer being 

7 interconnected by a computer network; 

8 said buyer computer being programmed to cause a 

9 payment message to be sent to said payment computer, said 

10 payment message comprising a product identifier identifying 

11 said product that said user desires to buy; 

12 said payment computer being programmed to receive 

13 said payment message , to cause an access message to be 

14 created to enable said user to access said product, and to 

15 record a purchase transaction record in said settlement 

16 database ; 

17 said buyer computer being programmed to cause a 

18 request for purchase transaction records to be sent to said 
7 9 payment computer; and 

2 0 said payment computer being programmed to receive 

21 said request for purchase transaction records and to cause a 

22 document derived from said purchase transaction records to 
2 3 be sent to said buyer computer. 

1 12 , A method of operating a payment computer in a 

2 network payment system comprising at least one buyer 

3 computer for operation by a user desiring to buy a product, 

4 and at least one payment computer for processing payment 

5 messages from said buyer computer, said method comprising 

6 the steps of: 

7 receiving, at said payment computer, a payment 

8 message that said buyer computer has caused to be sent to 

9 said payment computer, said payment message comprising a 

10 product identifier identifying said product that said user 

11 desires to buy; 
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12 causing an access message to be created to enable 

13 said user to access said product; 

14 recording a purchase transaction record in said 

15 settlement database ; 

16 receiving a request for purchase transaction records 

17 that said buyer computer has caused to be sent to said 

18 payment computer; and 

19 causing a document derived from said purchase 

20 transaction records to be sent to said buyer computer. 
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NETWORK SALES SYSTEM 

Abstract of the Disclosure 
A network-based sales system includes at least one 
buyer computer for operation by a user desiring to buy a 
product, at least one merchant computer, and at least one 
payment computer. The buyer computer, the merchant 
computer, and the payment computer are interconnected by a 
computer network. The buyer computer is programmed to 
receive a user request for purchasing a product, and to 
cause a payment message to be sent to the payment computer 
that comprises a product identifier identifying the product. 
The payment computer is programmed to receive the payment 
message, to cause an access message to be created that 
comprises the product identifier and an access message 
authenticator based on a cryptographic key, and to cause the 
access message to be sent to the merchant computer . The 
merchant computer is programmed to receive the access 
message, to verify the access message authenticator to 
ensure that the access message authenticator was created 
using the cryptographic key, and to cause the product to be 
sent to the user desiring to buy the product. 

209259 .Bll 
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buyer computer 12 merchant computer 14 payment computer 16 



user requests advertisements 
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buyer computer sends 
advertising document URL 
to merchant computer 
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merchants computer fetches 
advertising document from 
advertising document data base 
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32 



merchant computer sends 
advertising document 
to buyer computer 



user requests a product 
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buyer computer sends payment URL A to payment 
computer: payment URL A includes product 
identifier, domain identifier, payment amount, 
merchant computer identifier, merchant account 
identifier, duration time, expiration time, payment 
URL authenticator, and a buyer network address 



r 



payment computer verifies 
whether payment URL 
authenticator was created from 
contents of payment URL A 
using cryptographic key 



r 
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End 



payment computer sends document 
to buyer computer indicating that 
access the to the network sales 
svstem is denied. 
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FIG. 2A 
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payment computer 16 
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payment computer sends document 
to buyer computer indicating that 
expiration time has past 
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has past 
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payment computer checks to 
see if buver network address in 

payment URL matches buyer's 
computer network address 
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document indicating that 
access to network 
payment system is denied 





OR 



t 

44 



FIG. 2B 



buyer computer 12 



merchant computer 14 



payment computer 16 

42 



V 



r 



44 



payment computer sends payment 
confirmation document to buver 

computer; payment confirmation 
document includes open link (URL C) 
and continue link (URL B) 
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user opens new account 
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User continues with payment 
(user already has an account) 
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buyer computer sends payment URL B to 
payment computer; payment URL B is similar tc 
payment URL A but also indicates that an 
account does exist 



buyer computer sends payment URL C to payment 
computer: payment URL C is similar to payment 
URL A but also indicates that an account does not 
yet exist 
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payment computer creates 
new account document 
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payment computer sends new account 
document to buyer computer 



t 



FIG. 2C 



64 



buyer computer 12 



merchant computer 14 



payment computer 16 
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62 



user enters new account name, 
account password credit card 
number, security information and 
expiration date of credit card and 
presses a "submit* 1 button 
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buyer computer sends new account 
information to payment computer 
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payment computer 
enters new account 
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payment computer creates 
account name and password 
request message 
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user enters account 
name and password 



payment computer sends 
account name and password 
request message to buyer 
computer 
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buyer computer sends account 
name and password to payment 
computer 
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payment computer verifies whether 
user name and password are correct 



End 



payment computer sends document to 
buyer computer indicating that access 
to the networks sales svstem is denied 
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buyer computer 12 merchant computer 14 



payment computer 16 
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user enters security 
information 



buyer comcuter sends 
security information to 
payment computer 
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payment computer determines 
whether additional security is 
warranted, based on. e.g. whether 
the payment amount exceeds a 
threshold 



I 



if additional 
security is 
warranted, payment 
computer creates a 
challenge form 
document and sends 
it to buyer computer 



r 



81 



payment computer 
determines whether 
security information is 
correct 



End 





payment computer 
sends document to 
buyer computer 
indicating that access 
to the network sales 
system is denied 
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buyer computer 12 merchant computer 14 



payment computer 16 

73 OR 81 

V 
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payment computer checks 
settlement database to 
determine if user has 
unexpired access to the 
domain identifier contained in 
the payment URL 
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payment computer sends to buyer 
computer option to repurchase, or to 
use previously purchased access 




86^ 





7v 



OR 



buyer selects to 
repurchase item 



buyer selects previously 
purchased access 



85 



r 
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payment computer calculates an 
actual payment amount that may 
differ from the payment amount 
contained in the payment URL 
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FIG. 2F 



buyer computer 12 
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merchant computer 14 



payment computer 16 

82. 87 
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76 



payment computer 
verifies whether user 
account has sufficient 
funds or credit 



r 



78 



End 



payment computer sends document to 
buyer computer indicating that user 
account does not have sufficient funds 



A 

OR 



payment computer creates 
access URL which includes 
merchant computer identifier, 
domain identifier, product 
identifier, end of duration 
time, buyer network address, 
and access URL authenticator 



t 

92 



t 
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88 



payment computer records product identifier , domain, 
user account, merchant account, end of duration time, 
and actual payment amount in settlement database 
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90 



payment computer sends redirect to 
access URL to buyer computer 



FIG. 2G 
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End 
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merchant computer verifies that the buyer 
computer network address matches the 
network address specified in the access URL 



merchant computer sends document 
to buyer computer that access is not 
allowed 



A 

OR 



merchant computer sends 
fulfillment document to 
buyer computer 
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buyer computer displays 
fulfillment document 
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End 
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OR 



OR 



user requests display 
of shopping cart 
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buyer computer 
sends fetch shopping 
cart request to 
payment computer 
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payment computer creates or 
updates payment URL for shopping 
cart 

■_ j _ 
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user requests 
purchase of 
contents of 
shopping cart 
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buyer computer 
causes payment 
URL for shopping 
cart to be activated 



to step 36 



payment computer and 
buyer computer perform 
steps analogous to steps 
64-81 



r 
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buyer computer displays 
shopping cart 




payment computer 
returns contents of 
shopping cart to 
buyer computer 
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payment computer 16 
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buyer computer displays 
received document 
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payment computer retrieves 
settlement data from settlement 
database and creates smart 
statement document for buyer and 
sends smart statement document 
to buyer computer 
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User requests payment details for 
a particular transaction 
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buyer computer sends payment 
detail URL to payment computer 
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payment computer and buyer 
computer perform steps analogous 
to steps 132-140 
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payment computer retrieves from 
V_ settlement database data 

corresponding to the payment 
transaction specified in the 
payment detail URL, creates detail 
document, and sends it to buyer 
computer 
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user requests 
customer service 



buyer computer 
sends customer 
service URL to 
payment computer 
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payment computer creates 
customer service form and 
sends it to buyer computer 



user types comments 



buyer computer sends 
user's comments to 
payment computer 
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user requests display 
of a product 



164 



payment computer posts 
user comments and sends 
thank vou document to 
buyer computer 
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buyer computer sends 
access URL to merchant 
computer 
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payment computer 
verifies whether smart 
statement URL 
authenticator was 
created from contents of 
smart statement URL 
using cryptographic key 



134 ^ 




payment computer 
sends document to 
buyer computer 
indicating that access 
is denied 
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whether buyer network address in 
smart statement URL matches buyer's 
computer network address 




138 



payment computer sends document 
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Open Market Payment 
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Merchant: Test Merchant 
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Your total is 33.05. 



Previous Statements 



• September 1994 

• August 1994 

Return to your Newest Statement 



Feedback 

You can send us comments and suggestions here. 
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File Options Navigate Annotate 



Help 



Document Title: smart Statement Detail 



Document URL: http : / /payment . openmarket . com/ @c63 2f 154cc8021 




A 



Smart Statement Detail 

This is the detailed information about a particular transaction from your Smart Statement 



Transaction Information 

url: http: / /www. openmarket . com/demos/augl5/mall/mead- f ingerprint/mkarticle. ego 
transaction_log_id: 50254.0 
currency: US 

transaction_date: 781377633 
initiator: 1.0 
expiration: 2592000 

description: Mead Data Central Article 

amount: 2.95 

beneficiary: 3.0 

ip_address: 199 . 170. 183 . 13 

transact ion_type . p 

domain: mead. internet- 1 



Merchant Information 

telephone: 617-621-9501 

address_l: Open Market, Inc. 

address_2: 215 First Street 

fax: 617-621-1703 

address_3 : Cambridge, MA 

email : testmerchant@openmarket . com 

principal_name: Test Merchant 



V 



lBack|lForward| 




Reioad||Open...|fSave As...l 




[New Windowj [Close Window! 



FIG. 12 



File Options Navigate Annotate 



Help 



Document Title: 




Document URL: http : / /payment . openmarket . com/ @c632fl54cc8021 




urX: http://www.openmarket.com/deinos/augl5/inall/mead-fingerprint/inkart 

transaction_log_id: 50254 . 0 
currency : US 

transaction_date: 781377633 
initiator: 1.0 
expiration: 2592000 

description: Mead Data Central Article 
amount: 2.95 
beneficiary: 3.0 
ip_address: 199 . 170 . 183 . 13 
transaction__type . p 
domain: mead. internet- 1 



Merchant Information 



telephone: 617-621-9501 

address_l: Open Market, Inc. 

address_2: 215 First Street 

fax: 617-621-1703 

address_3 : Cambridge, MA 

email : testmerchant @openmarket . com 

principal_name: Test Merchant 

home_url : 

country : US 

postal_code: 02142 



Feedback 

You can send us comments and suggestions here 
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File Op Hons Na viga te Anno ta te 



Help 



Document Title: 



Document URL: 



Open Market Feedback 



http : / /payment . openmarket • com/ ben/ feedback . eg 




Or if you prefer, you can send your comments via electronic mail to 
feedback@openmarket.com or via FAX to +1.617.621.1703. If you would like a reply 
please include your e-mail address. 



Your Open Market accound name (optional) : 

i i 

Your E-mail address (optional) : 

i i 



Subject: 



Your comments: 
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Submit Feedback 



] 
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PATENT 

ATTORNEY DOCKET NO: 06543/008002 



COMBINED DECLARATION AND POWER OF ATTORNEY 

As a below named inventor, I hereby declare that: 

My residence, post office address and citizenship are as stated below next to my name, 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, first 
and joint inventor (if plural names are listed below) of the subject matter which is claimed and for which a 
patent is sought on the invention entitled , the specification of which 

■ is attached hereto. 

□ was filed on as Application Serial No. 

and was amended on . 

□ was described and claimed in PCT International Application No. 

filed on and as amended under PCT Article 19 on 



I hereby state that I have reviewed and understand the contents of the above-identified specification, 
including the claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose all information I know to be material to patentability in accordance 
with Title 37, Code of Federal Regulations, §1.56. 

I hereby claim the benefit under Title 35, United States Code, §120 of any United States application(s) 
listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the 
prior United States application in the manner provided by the first paragraph of Title 35, United States Code, 
§112, I acknowledge the duty to disclose all information I know to be material to patentability as defined in Title 
37, Code of Federal Regulations, § 1.56(a) which became available between the filing date of the prior 
application and the national or PCT international filing date of this application: 

U.S. SERIAL NO. FILING DATE STATUS 

08/328 ,1 33 October 24, 1994 ■ Pending □ Issued □ Abandoned 



I hereby appoint the following attorneys and/or agents to prosecute this application and to transact all 
business in the Patent and Trademark Office connected therewith: Gary A. Walpert, Reg. No. 26,098; James E. 
Mrose, Reg. No. 33,264; Timothy A. French, Reg. No. 30,175; John N. Williams, Reg. No. 18,948; Charles C. 
Winchester, Reg. No. 21,040 . 

Address all telephone calls to Gary A. Walpert at telephone number 617/542-5070. 

Address all correspondence to Gary A. Walpert , Fish & Richardson P.C., 225 Franklin Street , Boston, 
MA 02110-2804. 

I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statements and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willful false statements may jeopardize 
the validity of the application or any patents issued thereon. 

Full Name of Inventor: Andrew C. Payne 



Inventor's Signature: 




Residence Address: 5 Lewis Street, Lincoln, Massachusetts 01773 
Citizen of: U.S.A. 



Revised: August 24, 1994 (391DECL.MRG) 



COMBINED DECLARATION AND POWER OF ATTORNEY CONTINUED 

Post Office Address: 5 Lewis Street Lincoln, Massachusetts 01773 

Full Name of Inventor: Lawrence C. Stewart 

Inventor's Signature: ^ ^ Date: f/ *> of 9 ~7 

Residence Address: One Arborwood Drive, Burlington, Massachusetts 01803 

Citizen of: U.S.A. 

Post Office Address: One Arborwood Drive, Burlington, Massachusetts 01803 



Full Name of Inventor: David J. Mackie 



Inventor's Signature: 




Residence Address: 936 River Road, Brookdale, California 95007 
Citizen of: U.S.A. 



Post Office Address: 936 River Road, Brookdale, California 95007 



Revised: August 24, 1994 (39 1 DECL.MRG) 



